Two-factor authentication was supposed to be the safety net.
On May 11, 2026, Google's Threat Intelligence Group confirmed that a cybercrime group used an AI model to build a working 2FA bypass — and was caught preparing a mass-exploitation campaign with it.
Read that again. The thing protecting your Gmail. Your WordPress ...